Privacy Notice on the Protection of Peronal Data

Data Controller: VitaVia Gesund
Contact: info@vitaviagesund.com • vitaviagesund@gmail.com • WhatsApp: 0505 552 84 82

1) Processing Purposes

The personal data you share when you submit the form;

  • Preliminary assessment and creation of a personal treatment plan,
  • Execution of quotation and contract processes,
  • Coordination of appointments, hospital/clinic, accommodation and transfers,
  • Complication insurance application/communication processes,
  • Post-discharge follow-up and counselling,
  • Fulfilment of legal obligations and management of potential disputes are processed for these purposes.

2) Categories of Data Processed

Identity and contact details; travel/booking information; health data (special category data such as reports, discharge summaries, photographs, etc. that you share); billing/payment information.

3) Legal Basis

  • General data: Establishment/performance of a contract (KVKK Art. 5/2-c; DSGVO Art. 6(1)(b)), legal obligation (Art. 5/2-ç; Art. 6(1)(c)) and legitimate interest (Art. 5/2-f; Art. 6(1)(f)).
  • Health data: processed only with your explicit consent (KVKK Art. 6/2; DSGVO Art. 9(2)(a)).
  • Marketing/communication (if applicable): with separate explicit consent.

4) Recipients and Purpose

Your data may be shared with partner hospitals/clinics and relevant physicians, contracted laboratories, complication insurance companies, accommodation and transfer service providers, accounting/consulting suppliers, and legal authorities solely for the specified purposes.

5) Transfer Abroad

Due to the nature of the service, your data may be transferred to partner institutions and physicians in Turkey and/or suppliers outside the EEA/EU. Turkey is not a country that has been granted an ‘adequacy decision’ by the EU; therefore, the transfer is made with your explicit consent (KVKK Art. 9; DSGVO Art. 49(1)(a)). Your deliberate choice to use third-party communication channels such as WhatsApp/email may also involve processing/transfer on servers located outside the country.

6) Retention Period

  • If an offer/preliminary assessment is made but no contract is concluded: 24 months from the last communication.
  • If a contract is concluded: up to 10 years as required by commercial/tax obligations; original storage of medical records is carried out by healthcare institutions.
Unnecessary data is deleted/anonymised within a reasonable period.

7) Your Rights

In accordance with KVKK Article 11 and DSGVO, you have the right to access, rectify, erase, restrict processing, data portability, object to processing, and withdraw consent (withdrawal does not affect the lawfulness of processing prior to withdrawal).
For requests: info@vitaviagesund.com
Complaints: You may contact the Turkish Data Protection Authority or a data protection authority within the EU/EEA.
Age limit: Legal guardian consent is required for persons under the age of 18.

Statement of Explicit Consent:
I have read and understood this text. I give my explicit consent to the processing of my identity/contact and health data for the provision of preliminary assessment, planning, coordination, insurance and follow-up services; and to the transfer of my data to Turkey and countries outside the EEA.